An investigation into the recent Bybit hack has determined that the attackers most likely took advantage of a vulnerability in Safe, the crypto wallet that Bybit was using.

Late last week, hackers linked to North Korea’s Lazarus Group pulled off what is believed to be the biggest heist in history, stealing $1.48 billion from Bybit’s Ethereum (ETH) wallet.

Now, after an investigation by finance security firm Verichains and cybersecurity consultants Sygnia, Bybit CEO Ben Zhou reveals that Lazarus most likely compromised the exchange’s ETH wallet directly through Safe by accessing its Amazon Web Services (AWS) bucket.

“The benign Javascript file of app.safe.global appears to have been replaced with malicious code on February 19, 2025, at 15:29:25 UTC, specifically targeting Ethereum Multisig Cold Wallet of Bybit. The attack was designed to activate during the next Bybit transaction, which occurred on February 21, 2025, at 14:13:35 UTC…

Based on the investigation results from the machines of Bybit’s Signers and the cached malicious Javascript payload found on the Wayback Archive, we strongly conclude that AWS S3 or CloudFront account/API Key of Safe.Global was likely leaked or compromised.”

In a statement, Safe also confirmed the on-chain investigators’ findings.

“The forensic review into the targeted attack by the Lazarus Group on Bybit concluded that this attack targeted to the Bybit Safe was achieved through a compromised Safe{Wallet} developer machine resulting in the proposal of a disguised malicious transaction…

Following the recent incident, the Safe{Wallet} team conducted a thorough investigation and have now restored Safe{Wallet} on Ethereum mainnet with a phased rollout. The Safe{Wallet} team has fully rebuilt, reconfigured all infrastructure, and rotated all credentials, ensuring the attack vector is fully eliminated.”

Safe says it will release a more in-depth post-mortem report on the attack in the near future.

Just days after the hack, Zhou said the exchange had restored a 1:1 backing on all client assets after the record-setting hack. His claims were echoed in a proof-of-reserves audit report published by the blockchain security auditor Hacken on Sunday.

“The Hacken team’s Proof of Reserves audit, conducted on Sunday, February 23, 2025, demonstrates that Bybit maintains an in-scope reserve ratio of > 100 %. This finding signifies that Bybit possesses sufficient reserves to cover its in-scope liabilities, thereby bolstering trust and confidence among its users and stakeholders.”

Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inbox

Check Price Action

Follow us on X, Facebook and Telegram

Surf The Daily Hodl Mix

 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

Bank of America, one of the largest financial institutions in the US, is planning to launch its own stablecoin, according to its CEO.

In a new interview at the Economic Club of Washington, D.C., Bank of America CEO Brian Moynihan says they intend to launch a stablecoin once laws change to allow it, Fortune reports.

Says Moynihan,

“It’s pretty clear there’s going to be a stablecoin…

If they make that legal, we will go into that business.”

Laws allowing financial institutions like Bank of America to launch stablecoins are expected under pro-crypto US President Donald Trump, who took office in January.

Moynihan says that a Bank of America coin pegged to the US dollar opens up many possibilities.

“The question of what it’s useful for is going to be interesting.”

He also highlights how other recent advancements in technology have changed the way Bank of America does business, including when it became the first US bank to offer a mobile banking app on the iPhone.

“Back then it was an unusual thing to have an app. Everybody went to the websites. So that took off. We now have 40 million consumers who bank digitally with us all the time.”

The bank also launched an artificial intelligence-powered assistant named Erica in 2018.

According to Moynihan, about 90% of the bank’s interactions with customers last year were digital.

 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

DekaBank, a German investment bank with $395 billion in assets under management, is reportedly rolling out crypto trading services for certain clients.

According to a new report by Bloomberg, DekaBank is now providing the purchase, sale, custody and management of cryptocurrencies for its institutional customers.

Says DekaBank board member Martin Müller,

“We have the necessary experience, the necessary licenses and a tested and ready-to-use infrastructure to support savings banks and our other institutional customers.”

DekaBank has secured the proper permits to provide digital asset services, including a crypto custody license under the Banking Act from the European Central Bank and the Federal Financial Supervisory Authority (Bafin).

DekaBank believes there is demand for institutional investors to buy crypto and diversify their portfolios.

Other savings banks in Germany are already providing crypto services, including Landesbank Baden-Württemberg (LBBW), which has partnered with crypto platform Bitpanda to allow its corporate clients to buy and sell digital assets.

Some savings banks also plan to roll out crypto services for private customers.

Germany’s cooperative banks Volksbank and Raiffeisenbank, led by DZ Bank, are slated to offer private customers crypto services by the middle of the year.

The effort is being launched in partnership with IT service provider Atruvia and the Stuttgart Stock Exchange.

 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney

A crypto whale is booking millions of dollars in losses after a long position on the Official Trump (TRUMP) turned against him, on-chain data reveals.

According to blockchain tracking platform Lookonchain, the whale liquidated his position in the TRUMP memecoin at a loss of $24.4 million.

The blockchain-tracking platform says the whale acquired 763,582 TRUMP tokens about a month ago at a price of $33.9 million but has now sold the stash at approximately $9.48 million. Per Lookonchain, the whale had previously turned a profit on the memecoin before the loss-making trade.

“This whale had already made $11.8 million on TRUMP before.

After tasting success, he spent another $33.9 million to buy TRUMP.

However, after his purchase, TRUMP kept dropping.

After holding for a month, he capitulated—losing not only all his profits but also $12.6 million of his initial capital.”

TRUMP is trading at $13.06 at time of writing, down by around 82% from the all-time high price it reached last month.

The TRUMP memecoin, which is billed as President Donald Trump’s only official meme asset, was launched three days before the January 20th inauguration. On the eve of the inauguration, the memecoin which is built in the Solana (SOL) ecosystem reached an all-time high price of around $73.45.

 

Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any cryptocurrencies or digital assets, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.

Generated Image: Midjourney